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IN THE CLAIMS 
Please amend the claims as follows: 

Claim 1 (Previously Presented): A computer-based method for restricting access to 
network accessible digital information by network users of at least one subscriber network, 
said method comprising the steps of: 

(a) monitoring at a subscriber network requests by the network users for digital 
information; 

(b) determining whether a location indicator associated with a request is included 
in a database of restricted location indicators maintained at the subscriber network and 
denying the request where the location indicator is in the database; 

(c) retrieving at the subscriber network digital information stored at a location 
corresponding to the location indicator and initially analysing content of information at said 
location for a predetermined maximum time in the event that the location indicator is not in 
the database and denying or fulfilling the request based on the initial analysis, wherein 
searching of the database and the initial content analysis occur at a network bridge installed at 
the subscriber network; 

(d) periodically forwarding location indicators associated with requests and not in 
the database from the subscriber network to a remote network node; 

(e) retrieving at the remote network node information stored at a location 
corresponding to the forwarded location indicator and further analysing a content type of the 
retrieved information; and 

(f) periodically dispatching to the subscriber networks from the remote node 
location indicators found by said further analysis to have restricted type content stored 
therein, for inclusion in the database of restricted location indicators maintained at the 
subscriber network. 
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Claim 2 (Original): The method of claim 1 wherein the digital information includes 
content accessible via the Internet. 

Claim 3 (Previously Presented): The method of claim 1 wherein the subscriber 
networks are local area networks wherein client computers communicate via the Ethernet 
access protocol. 

Claim 4 (Previously Presented): The method of claim 3 wherein the network bridge is 
an Ethernet bridge. 

Claim 5 (Previously Presented): The method of claim 1 wherein the location 
indicator is a Uniform Resource Locator. 

Claim 6 (Original): The method of claim 4 wherein the location indicator is extracted 
from an Ethernet frame originating from a client computer of a network user. 

Claim 7 (Original): The method of claim 1 wherein the database is stored in 
encrypted form and is searched for an encrypted location indicator. 

Claim 8 (Previously Presented): The method of claim 1 including the step of 
determining whether the location indicator is in an exception list before determining whether 
it is in the database and fulfilling the request in the event that the location indicator is in the 
exception list. 
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Claim 9 (Original): The method of claim 1 wherein the request is fulfilled in the 
event that the location indicator is in the database but is a permitted category of restricted 
content. 

Claim 10 (Previously Presented): The method of claim 1 wherein the location 
indicators are forwarded from the subscriber network to the remote network node on at least 
an hourly basis and the location indicators are forwarded from the remote network node to 
the subscriber network on at least an hourly basis. 

Claim 1 1 (Previously Presented): A system for restricting access to network 
accessible digital information by network users of at least one subscriber network, said 
system comprising: 

(a) a database of restricted location indicators stored at a subscriber network; 

(b) monitoring means at the subscriber network for monitoring requests by the 
network users of the subscriber network for digital information; 

(c) said monitoring means also determining whether a location indicator 
associated with each request is in the database, wherein the monitoring means comprises a 
network bridge installed at the subscriber network; 

(d) analysis means at the subscriber network for initially analysing content of 
information stored at a location corresponding to a location indicator not in the database and 
for denying or fulfilling the request based on the initial analysis; 

(e) forwarding means at the subscriber network for periodically forwarding 
location indicators associated with requests and not in the database to a remote network node; 
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(f) retrieval and analysis means for retrieving by the remote network node 
information stored at a location corresponding to the location indicator forwarded by the 
subscriber network and for further analysing a content type of the retrieved information; and 

(g) dispatching means at the remote network node for periodically dispatching 
from the remote node location indicators found by said further analysis to have restricted type 
content stored therein for inclusion in the database of restricted location indicators maintained 
at the subscriber network. 

Claim 12 (Original): The system of claim 1 1 wherein the digital information includes 
content accessible via the Internet. 

Claim 13 (Original): The system of claim 1 1 wherein the subscriber networks are 
local area networks communicating via the Ethernet protocol. 

Claim 14 (Currently Amended): The system of claim 13 wherein the network bridge 
is an Ethernet bridge. 

Claim 15 (Original): The system of claim 1 1 wherein the location indicator is a 
Uniform Resource Locator. 

Claim 16 (Original): The system of claim 14 wherein the location indicator is 
extracted from an Ethernet Frame originating from a client computer of a network user. 

Claim 17 (Original): The system of claim 1 1 wherein the database is stored in 
encrypted form and is searched by the monitoring means for an encrypted location indicator. 
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Claim 18 (Original): The system of claim 1 1 wherein the monitoring means 
determine whether the location indicator is in the exception list before determining whether it 
is in the database and fulfils the request in the event that the location indicator is in the 
exception list. 

Claim 19 (Original): The system of claim 1 1 wherein the system fulfils requests in 
the event that the location indicator associated with the request is in the database, but is a 
permitted category of restricted content. 

Claim 20 (Previously Presented): The system of claim 1 1 wherein the forwarding 
means and the dispatching means deliver location indicators on an hourly basis. 

Claim 21 (Currently Amended): A computer software program, stored in a computer 
readable m o diu™, eemprismg inRtrnptinnr . configur e d to caus e a A computer readable storage 
medium encode with instructions which when executed by a computer, cause the computer to 
execute a method for restricting access to network accessible digital information by the 
network users of a subscriber network, said method comprising: 

(a) monitoring requests by the network users for digital information, wherein the 
subscriber network includes respective client computers for said network users; 

(b) determining whether a location indicator associated with a request is included 
in a database of restricted location indicators stored at the subscriber network, wherein the 
location indicator is extracted from a data frame originating from the network user request; 

(c) analysing a content type of information stored at a location corresponding to a 
location indicator not in the database for a predetermined time, and denying or fulfilling the 
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request based on the analysis, wherein location indicators are extracted and content analysed 
by a network bridge installed at the subscriber network; 

(d) periodically forwarding location indicators associated with requests and not in 
the database to a remote network node; 

(e) allowing the remote network node to retrieve the digital information stored at 
a location corresponding to the forwarded location indicator for further analysis of a content 
type of the retrieved information; and 

(f) computer readable program code means for periodically receiving from the 
remote network node location indicators found by said further analysis to have restricted type 
content stored therein, and including said received location indicators in the database. 

Claim 22 (Currently Amended): The method - computer reada ble storage medium of 
claim 21 wherein the digital information is content accessible via the Internet. 

Claim 23 (Currently Amended): The method- computer readable storage medium of 
claim 22 wherein the subscriber network is a local area network wherein the client computers 
communicate via the Ethernet protocol. 

Claim 24 (Currently Amended): The method- computer readable storage medium of 
claim 22 wherein the location indicator is a Uniform Resource Locator. 

Claim 25 (Currently Amended): The method- computer reada ble storage medium of 
claim 23 wherein the data frame is an Ethernet frame originating from the client computer of 
a requesting network user. 
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Claim 26 (Currently Amended): The method computer readable storage medium of 
claim 2 L wherein the method further comprising comprises encrypting the location indicator 
before including in the database or determining whether the encrypted location indicator is in 
the database. 

Claim 27 (Currently Amended): The method- computer readable storage medium of 
claim 2 L wherein the method further comprising comprises determining whether the 
location indicator is in an exception list before determining whether it is in the database and 
for fulfilling the request in the event that the location indicator is in the exception list. 

Claim 28 (Currently Amended): The method computer readable storage medium of 
claim 21 . wherein the method further comprising comprises fulfilling a request in the event 
that the location indicator is in the database but is a permitted category of restricted content. 

Claim 29 (Currently Amended): The method- computer reada ble storage medium of 
claim 21 wherein the location indicators are forward to, and received from, the remote node 
on at least an hourly basis. 

Claim 30 (New). The method of claim 1, further comprising: 

(g) accessing the network bridge and customizing a level of filtering performed at the 
network bridge based on policies adopted at the subscriber network. 

Claim 31 (New). The method of claim 1, prior to steps (b) through (f), further 
comprising: 
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comparing the location indicator to an exception list that includes a list of digital 
information allowed to be accessed by the network users of the at least one subscriber 
network; and 

bypassing a filtering process of steps (b) through (f) if the location indicator is 
included in the exception list and proceeding to steps (b) through (f) if the location indicator 
is not included in the exception list. 
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